If you run across something like this:

* perhaps archive your findings

* report the abuse to their hosting

I'm dropping emails to jsonbin.io and to ZapHosting (who run 147.189.174.138) about this.

A lot of hosting providers don't really care, sadly :(

Their upstream transit providers do, surely.